3533 matches found
Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Crafty Syntax Image Gallery = 4.0 + creating user account + user: 98fe56123 password: 7652L4M3l39q email: emai...
CVE-2006-0947
CVE-2006-0947 affects Thomson SpeedTouch modem firmware 5.3.2.6.0. Affected component is the NewUser function where the 31 parameter can create accounts that the administrator cannot delete, due to filtering/cleansing in the admin interface. The issue allows remote attackers to create non-deletab...
CVE-2006-0865: Undefined Security Weakness
PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service resource consumption by registering many user accounts quickly...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...
[SA18819] WebGUI User Account Creation Vulnerability
TITLE: WebGUI User Account Creation Vulnerability SECUNIA ADVISORY ID: SA18819 VERIFY ADVISORY: http://secunia.com/advisories/18819/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: A vulnerability has been...
RCBlog index.php post Parameter Traversal Arbitrary File Access
The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. An attacker can use this to access arbitrary files on the remote host provided PHP's 'magicquotes' setting is...
Code injection
Mail Management Agent MAILMA aka Mail Management Server in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account...
Cisco PIX firewalls unauthorized access
Pseudo user account in a form of ACSACL-IP-uacl-xxxxxxxx is created for ACL download. It's possible to use this account for authentication...
Windows password weakness
Added: 12/19/2005 CVE: CVE-1999-0503 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...
CVE-2005-4274
CVE-2005-4274 affects Business Objects WebIntelligence 6.5x. The vulnerability permits remote attackers to cause a denial of service (user account lockout) via unknown attack vectors related to authentication mechanisms and form input. The available sources describe the issue but do not provide c...
CVE-2005-4274
Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service user account lock out via unknown attack vectors related to "authentication mechanisms" and "form input."...
CVE-2005-4274
Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service user account lock out via unknown attack vectors related to "authentication mechanisms" and "form input."...
CVE-2005-4274: Undefined Security Weakness
Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service user account lock out via unknown attack vectors related to "authentication mechanisms" and "form input."...
WS_FTP SITE CPWD Buffer Overflow
This host is running a version of WSFTP FTP server prior to 3.1.2. Versions earlier than 3.1.2 contain an unchecked buffer in routines that handle the 'CPWD' command arguments. The 'CPWD' command allows remote users to change their password. By issuing a malformed argument to the CPWD command, a...
Synchrologic User account information disclosure
The remote host seems to be running Synchrologic Email Accelerator Synchrologic is a product which allows remote PDA users to synch with email, calendar, etc. If this server is on an Internet segment as opposed to internal, you may wish to tighten the access to the aggregate.asp page. The server...
WS_FTP Server < 3.1.2 Buffer Overflow Vulnerability
WSFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
F5 Device Default Support Password (HTTP)
This F5 Networks system still has the default password set for the support user account. This account normally provides read/write access to the web configuration utility. SPDX-FileCopyrightText: 2001 HD Moore / Digital Defense Inc. Some text descriptions might be excerpted from a referenced...
Default password 'forgot' for account 'user' (SSH/Telnet)
The account SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.17294";...
Critical Security Advisory #005: ioFTPd User account enumeration vulnerability
Inicom networks ioFTPd 0.5.84u User account enumeration vulnerability Critical Security research: http://www.critical.lt Original Advisory may be found: http://www.critical.lt/?vulnerabilities/119 Vulnerable product: ioFTPd 0.5.84u maybe prior versions affected too Vulnerability type: User accoun...
FlatNuke 2.5.x - index.php Multiple Remote File Inclusions
FlatNuke 2.5.x - index.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/15172/info FlatNuke is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...